Malicious code in @athena-ui-components/lang (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7045 Malicious code in @athena-ui-components/lang (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @athena-ui-components/helpers (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7043 Malicious code in @athena-ui-components/helpers (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @athena-ui-components/graceful-degradation (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7042 Malicious code in @athena-ui-components/graceful-degradation (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @asurion-core/eventualize-react-b (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @apps-locations/events (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @apps-legacy-reports/events (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7037 Malicious code in @applicationbuildingcenter/xcube-schema (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @app-tray-ui/stencil-component (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @aoflcorp/freighter (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7035 Malicious code in @aoflcorp/freighter (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @alphasedboy/game (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @2011-08-19/n (npm)

--- -= Per source details. Do not edit below this line.=-...

ROOT-APP-NPM-CVE-2026-35213 CVE-2026-35213 in @rootio/hapi__content - Patched by Root

Root has patched CVE-2026-35213 in the @rootio/hapicontent package for Root:npm. Multiple fixed versions available...

MAL-2026-10655 Malicious code in @pimy-b2cweb/apiclient-b2cweb-r2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e81b01be81080333f758249c9b2b33eea63eff7eb1d10c62c6b42288e99a227 The OpenSSF Package Analysis project identified '@pimy-b2cweb/apiclient-b2cweb-r2' @ 99.99.99 npm as malicious. It is considered malicious...

Malicious code in @higherlogic/ocfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bbd559291bd6c2d7889aebe011bb43bef61938171904f5c9ff378f33fd9e5e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6911 Malicious code in @higherlogic/ocfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bbd559291bd6c2d7889aebe011bb43bef61938171904f5c9ff378f33fd9e5e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paperclip-adapter-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49d1a6c5381f58370cbfedc2321bd44796eb4ea79541d967a661760d9759801 [email protected] executes a credential-theft and C2 backdoor automatically on import. The package's main re-exports...